Поиск уязвимостей
Количество 25
Количество 25
ALT-PU-2019-2942
ALT-PU-2019-2942: package `sudo` update to version 1.8.28-alt1
CVE-2023-7090
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
CVE-2023-7090
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
CVE-2023-7090
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
CVE-2023-7090
A flaw was found in sudo in the handling of ipa_hostname, where ipa_ho ...
CVE-2019-14287
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
CVE-2019-14287
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
CVE-2019-14287
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
CVE-2019-14287
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer a ...
GHSA-8mrc-5phh-m9pc
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
BDU:2024-01198
Уязвимость программы для системного администрирования sudo, связанная с неправильным управлением привилегиями, позволяющая нарушителю обойти существующие ограничения безопасности и сохранить свои привилегии после их отзыва
openSUSE-SU-2019:2333-1
Security update for sudo
openSUSE-SU-2019:2316-1
Security update for sudo
SUSE-SU-2019:2668-1
Security update for sudo
SUSE-SU-2019:2667-1
Security update for sudo
SUSE-SU-2019:2666-1
Security update for sudo
SUSE-SU-2019:2656-1
Security update for sudo
SUSE-SU-2019:14193-1
Security update for sudo
GHSA-33h3-qhjg-4qmf
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.
ELSA-2019-4822
ELSA-2019-4822: sudo security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2019-2942 ALT-PU-2019-2942: package `sudo` update to version 1.8.28-alt1 | CVSS3: 8.8 | около 7 лет назад | |
 | CVE-2023-7090 A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them. | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
 | CVE-2023-7090 A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them. | CVSS3: 6.6 | 1% Низкий | около 7 лет назад |
 | CVE-2023-7090 A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them. | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
| CVE-2023-7090 A flaw was found in sudo in the handling of ipa_hostname, where ipa_ho ... | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
| CVE-2019-14287 In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. | CVSS3: 8.8 | 64% Средний | около 7 лет назад |
| CVE-2019-14287 In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. | CVSS3: 7 | 64% Средний | около 7 лет назад |
| CVE-2019-14287 In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. | CVSS3: 8.8 | 64% Средний | около 7 лет назад |
| CVE-2019-14287 In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer a ... | CVSS3: 8.8 | 64% Средний | около 7 лет назад |
| GHSA-8mrc-5phh-m9pc A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them. | CVSS3: 6.6 | 1% Низкий | почти 3 года назад |
 | BDU:2024-01198 Уязвимость программы для системного администрирования sudo, связанная с неправильным управлением привилегиями, позволяющая нарушителю обойти существующие ограничения безопасности и сохранить свои привилегии после их отзыва | CVSS3: 8.8 | 1% Низкий | почти 3 года назад |
 | openSUSE-SU-2019:2333-1 Security update for sudo | 64% Средний | около 7 лет назад | |
| openSUSE-SU-2019:2316-1 Security update for sudo | 64% Средний | около 7 лет назад | |
| SUSE-SU-2019:2668-1 Security update for sudo | 64% Средний | около 7 лет назад | |
| SUSE-SU-2019:2667-1 Security update for sudo | 64% Средний | около 7 лет назад | |
| SUSE-SU-2019:2666-1 Security update for sudo | 64% Средний | около 7 лет назад | |
| SUSE-SU-2019:2656-1 Security update for sudo | 64% Средний | около 7 лет назад | |
| SUSE-SU-2019:14193-1 Security update for sudo | 64% Средний | около 7 лет назад | |
| GHSA-33h3-qhjg-4qmf In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. | CVSS3: 8.8 | 64% Средний | больше 4 лет назад |
| ELSA-2019-4822 ELSA-2019-4822: sudo security update (IMPORTANT) | 64% Средний | около 7 лет назад |
Уязвимостей на страницу